[CLSA-2026:1791280039] libxml2: Fix of CVE-2026-74860
Type:
security
Severity:
Important
Release date:
2026-10-06 09:47:30 UTC
Description:
- CVE-2026-74860: do not decref the attribute name string after PyList_SetItem in the Python SAX attributeDecl callback to avoid a double-free
CVEs fixed:
Updated packages:
  • libxml2-2.9.7-9.el8_4.2.tuxcare.els19.i686.rpm
    sha:c1a2f5b4a7ba3b9e7387fb382263f9247b010ddd21629c397dfdb812f7d22b68
  • libxml2-2.9.7-9.el8_4.2.tuxcare.els19.x86_64.rpm
    sha:1d69942af815e77283802350c4f9c7eb378bcccd69716f4f4c0d6718cd6326b5
  • libxml2-devel-2.9.7-9.el8_4.2.tuxcare.els19.i686.rpm
    sha:98f828629b75dd3811ad8da76b53b2e30c15539c3a50f64536d8d9ac41f62ed9
  • libxml2-devel-2.9.7-9.el8_4.2.tuxcare.els19.x86_64.rpm
    sha:c0df2daea8c05d6359b2e80e88b3b01f7561a2234f71ca34c263bd901ab35785
  • libxml2-static-2.9.7-9.el8_4.2.tuxcare.els19.i686.rpm
    sha:5af244a4f49651b9c6df6cf7a9a9292ef77be17a26b10e6c418b1e83d21bde97
  • libxml2-static-2.9.7-9.el8_4.2.tuxcare.els19.x86_64.rpm
    sha:47f1c205ffb03c44b107af525e886157a88c46e1530b4c7b935fd82b752c3fe6
  • python3-libxml2-2.9.7-9.el8_4.2.tuxcare.els19.i686.rpm
    sha:bac9ecf05fc8ff2668f194e940fedc0cf157ee9527460265081a6b22ef3ae5c0
  • python3-libxml2-2.9.7-9.el8_4.2.tuxcare.els19.x86_64.rpm
    sha:17236990545b6826dfad3700094d3a57bd2e3d04dfe9fe1e5978a6b3ef2c2694
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.